Advanced search    Help

Clear all search criteria

Only 2/3! You are seeing results from the Public Collection, not the complete Full Collection. Sign in to search everything (see eligibility).

• Transfer of Defense Articles: Foreign Military Sales (FMS) [February 21, 2020]

  Show summary     Open resource [pdf]     (open full abstract)

  From the Document: "The United States sells more than $55 billion worth of defense articles and services annually to foreign governments to advance U.S. security and economic interests. Such purchases are managed primarily through the Foreign Military Sales program (FMS), through which the U.S. government procures defense articles as an intermediary for foreign partners. This adds value for customers by ensuring that they have the same contract benefits and protections that apply to the U.S. military's acquisition of its own defense articles and services. In turn, the U.S. benefits from a government-to-government relationship in the sale intended to comply with U.S. foreign and security policy, as well as to help ensure militarily interoperable weapons systems among allies and partners. Congress authorized the FMS program in the Arms Export Control Act (AECA) of 1976 (22 U.S.C. §2751 et seq.) and provides active oversight of the program through annual Department of State and Foreign Operations Appropriations Acts and the National Defense Authorization Acts. Such oversight is also seen in the congressional response to executive branch notifications of foreign arms sales. Through these mechanisms, Congress may limit or prohibit FMS to certain countries, or encourage the use of FMS in other cases."

  Library of Congress. Congressional Research Service

  Lucas, Nathan J.; Vassalotti, Michael J.

  2020-02-21
• Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.2: Recommendations of the National Institute of Standards and Technology

  Show summary     Open resource [pdf]     (open full abstract)

  "The Security Content Automation Protocol (SCAP) is a suite of specifications that standardize the format and nomenclature by which software flaw and security configuration information is communicated, both to machines and humans. SCAP is a multi-purpose framework of specifications that support automated configuration, vulnerability and patch checking, technical control compliance activities, and security measurement. Goals for the development of SCAP include standardizing system security management, promoting interoperability of security products, and fostering the use of standard expressions of security content. [...] This document provides the definitive technical specification for version 1.2 of the Security Content Automation Protocol (SCAP). SCAP (pronounced ess-cap) consists of a suite of specifications for standardizing the format and nomenclature by which software flaw and security configuration information is communicated, both to machines and humans. This document defines requirements for creating and processing SCAP source content. These requirements build on the requirements defined within the individual SCAP component specifications. Each new requirement pertains either to using multiple component specifications together or to further constraining one of the individual component specifications. The requirements within the individual component specifications are not repeated in this document; see those specifications to view their requirements."

  Information Technology Laboratory (National Institute of Standards and Technology). Computer Security Division

  Waltermire, David; Quinn, Stephen D.; Scarfone, Karen

  2011-09
• Constitutional Authority to Regulate the Privacy of State-Collected Contact-Tracing Data [June 26, 2020]

  Show summary     Open resource [pdf]     (open full abstract)

  Form the Document: "Amid the ongoing COVID-19 [coronavirus disease 2019] pandemic, several states have developed and promoted contact-tracing mobile device apps to identify individuals who may have had contact with infected persons. Additionally, the two largest manufacturers of mobile device operating systems, Apple (iOS) and Google (Android), have announced plans to release application programming interfaces (APIs) to 'enable interoperability between Android and iOS devices using apps from public health authorities.' Several bills in the 116th Congress would regulate the privacy of information collected through such contact-tracing apps."

  Library of Congress. Congressional Research Service

  Liu, Edward C.

  2020-06-26
• Guide to Cyber Threat Information Sharing (DRAFT)

  Show summary     Open resource [pdf]     (open full abstract)

  The following is a NIST (National Institute of Standards and Technology) working draft on cyber threat information sharing. From the Executive Summary: "As the magnitude and complexity of cyberspace increases, so too does the threat landscape. Cyber attacks have increased in both frequency and sophistication resulting in significant challenges to organizations that must defend their infrastructure from attacks by capable adversaries. These adversaries range from individual attackers to well-resourced groups operating as part of a criminal enterprise or on behalf of a nation-state. These adversaries are persistent, motivated, and agile; and employ a variety of tactics, techniques, and procedures (TTPs) to compromise systems, disrupt services, commit financial fraud, expose sensitive information, and steal intellectual property. To enhance incident response actions and bolster cyber defenses, organizations must harness the collective wisdom of peer organizations through information sharing and coordinated incident response. This publication expands upon the guidance introduced in Section 4, Coordination and Information Sharing of NIST Special Publication (SP) 800-61, 'Computer Security Incident Handling Guide' and explores information sharing, coordination, and collaboration as part of the incident response life cycle. This publication assists organizations in establishing, participating in, and maintaining information sharing relationships throughout the incident response life cycle. The publication explores the benefits and challenges of coordination and sharing, presents the strengths and weaknesses of various information sharing architectures, clarifies the importance of trust, and introduces specific data handling considerations. The goal of the publication is to provide guidance that improves the efficiency and effectiveness of defensive cyber operations and incident response activities, by introducing safe and effective information sharing practices, examining the value of standard data formats and transport protocols to foster greater interoperability, and providing guidance on the planning, implementation, and maintenance of information sharing programs."

  National Institute of Standards and Technology (U.S.); United States. Department of Commerce

  Johnson, Chris; Badger, Lee; Waltermire, David

  2014-10
• Public Safety Communications: Policy, Proposals, Legislation and Progress [Updated June 23, 2005]

  Show summary     Open resource [pdf]     (open full abstract)

  "This report provides an analysis of major policy questions regarding public safety communications. The 9/11 Commission recommendations for action to improve communications and the testimony and comments of experts is used as the framework to review issues such as spectrum availability, technology for interoperability, funding, and longer term goals and concerns. The 108th Congress required a number of studies and pilots, the results of which could shape policy decisions in the 109th. In particular, both Congress and the Administration have required the Department of Homeland Security to develop a strategy for spectrum use and to evaluate its role in public safety communications."

  Library of Congress. Congressional Research Service

  Moore, L. K. S. (Linda K. S.)

  2005-06-23
• Public Safety Communications: Policy, Proposals, Legislation and Progress [Updated June 8, 2005]

  Show summary     Open resource [pdf]     (open full abstract)

  "This report provides an analysis of major policy questions regarding public safety communications. The 9/11 Commission recommendations for action to improve communications and the testimony and comments of experts provide a framework to review what has been accomplished since September 11, what legislative initiatives could be considered by the 109th Congress, and longer term goals and concerns. Major issues include (1) unifying spectrum policy and communications policy at every level; (2) using signal corps type skills and technology, as suggested by the 9/11 Commission, to achieve interoperability; and (3) evaluating the pace and effectiveness of federal actions taken to-date."

  Library of Congress. Congressional Research Service

  Moore, L. K. S. (Linda K. S.)

  2005-06-08
• Visa Issuances: Policy, Issues, and Legislation [Updated February 11, 2004]

  Show summary     Open resource [pdf]     (open full abstract)

  "Since the September 11, 2001 terrorist attacks, considerable concern has been raised because the 19 terrorists were aliens who apparently entered the United States with temporary visas despite provisions in immigration laws that bar the admission of terrorists. Foreign nationals not already legally residing in the United States who wish to come to the United States generally must obtain a visa to be admitted, with certain exceptions noted in law. Fears that lax enforcement of immigration laws regulating the admission of foreign nationals into the United States may continue to make the United States vulnerable to further terrorist attacks have led to revisions in the policy as well as changes in who administers immigration law. The 107th Congress expanded the definition of terrorism and the designation of terrorist organizations used to determine the inadmissibility and removal of aliens in the USA Patriot Act (P.L. 107-56). Another law, the Enhanced Border Security and Visa Entry Reform Act (P.L. 107-173), sought to improve the visa issuance process by mandating data sharing so that consular officers have access to relevant electronic information. This law also required the development of an interoperable electronic data system to be used to share information relevant to alien admissibility and removability and required that all visas issued by October 2004 have biometric identifiers."

  Library of Congress. Congressional Research Service

  Wasem, Ruth Ellen

  2004-02-11
• Public Safety Communications and Spectrum Resources: Policy Issues for Congress [September 1, 2010]

  Show summary     Open resource [pdf]     (open full abstract)

  "Effective emergency response is dependent on wireless communications. To minimize communications failures during and after a crisis requires ongoing improvements in emergency communications capacity and capability. The availability of radio frequency spectrum is considered essential to developing a modern, interoperable communications network for public safety. Also critical are (1) building the network to use this spectrum and (2) developing and deploying the radios to the new standards required for mobile broadband. Beyond recognition of these common needs and goals, opinions diverge on such issues as how much spectrum should be made available for public safety broadband communications, how communications networks should be configured, who should own them, who should build them, who should operate them, who should be allowed to use them, and how they might be paid for. Three bills that would increase the amount of radio frequency spectrum assigned for public safety use have been introduced. The bills would require that the Federal Communications Commission (FCC) transfer a spectrum license intended for commercial use, known as the D Block, to the license-holder for adjacent frequencies already assigned to public safety, known as the Public Safety Broadband License. The Broadband for First Responders Act of 2010 (H.R. 5081, Representative King) deals primarily with reassignment of the D Block. Two Senate bills contain similar provisions for spectrum assignment and would add a number of new provisions, including using the proceeds of future spectrum auctions to fund the needed network (S. 3625, Senator Lieberman and S. 3756, Senator Rockefeller)."

  Library of Congress. Congressional Research Service

  Moore, L. K. S. (Linda K. S.)

  2010-09-01
• Public Safety Communications and Spectrum Resources: Policy Issues for Congress [July 23, 2010]

  Show summary     Open resource [pdf]     (open full abstract)

  "Effective emergency response is dependent on wireless communications. To minimize communications failures during and after a crisis requires ongoing improvements in emergency communications capacity and capability. The availability of radio frequency spectrum is considered essential to developing a modern, interoperable communications network for public safety. Equally critical is building the radio network to use this spectrum. Opinions diverge, however, on such issues as how much spectrum should be made available for the network, who should own it, who should build it, who should operate it, who should be allowed to use it, and how it might be paid for. To resolve the debate and move the planning process forward, Congress may decide to pursue oversight or change existing law. Actions proposed to Congress include (1) authorizing the Federal Communications Commission (FCC) to reassign spectrum and (2) changing requirements for the use of spectrum auction proceeds. In particular, legislation in the Deficit Reduction Act of 2005 (P.L. 109-171) might be modified. This law mandated the termination of analog television broadcasting and the release of those channels for other uses, including public safety. Congress may consider additional legislation to meet desired levels of emergency communications performance. A bill that would increase the amount of radio frequency spectrum assigned for public safety has been introduced (H.R. 5081, Representative King). A Senate bill contains similar provisions for spectrum assignment and would add a number of new provisions, including funding (S. 3625, Senator Lieberman). Both bills would require the FCC to transfer a spectrum license intended for commercial use, the D Block, to the license-holder for adjacent frequencies already assigned to public safety, known as the Public Safety Broadband License. Other bills and oversight activities are likely."

  Library of Congress. Congressional Research Service

  Moore, L. K. S. (Linda K. S.)

  2010-07-23
• Public Safety Communications and Spectrum Resources: Policy Issues for Congress [Juy 15, 2010]

  Show summary     Open resource [pdf]     (open full abstract)

  "Effective emergency response is dependent on wireless communications. To minimize communications failures during and after a crisis requires ongoing improvements in emergency communications capacity and capability. The availability of radio frequency spectrum is considered essential to developing a modern, interoperable communications network for public safety. Equally critical is building the radio network to use this spectrum. Opinions diverge, however, on such issues as how much spectrum should be made available for the network, who should own it, who should build it, who should operate it, who should be allowed to use it, and how it might be paid for. To resolve the debate and move the planning process forward, Congress may decide to pursue oversight or change existing law. Actions proposed to Congress include (1) authorizing the Federal Communications Commission (FCC) to reassign spectrum and (2) changing requirements for the use of spectrum auction proceeds. In particular, legislation in the Deficit Reduction Act of 2005 (P.L. 109-171) might be modified. This law mandated the termination of analog television broadcasting and the release of those channels for other uses, including public safety. Congress may consider additional legislation to meet desired levels of emergency communications performance. One bill that would increase the amount of radio frequency spectrum assigned for public safety has been introduced (H.R. 5081, Representative King) and other bills and oversight activities are likely."

  Library of Congress. Congressional Research Service

  Moore, L. K. S. (Linda K. S.)

  2010-07-15
• CISA Global

  Show summary     Open resource [pdf]     (open full abstract)

  From the Document: "In today's globally and interconnected world, we confront a wide array of serious risks and threats to our critical infrastructure, systems, assets, functions, and citizens. State and non-state actor adversaries and competitors seek to advance their objectives through a variety of tactics, including subtle actions that significantly weaken the foundations of U.S. power, degrade societal functions, undermine trust in institutions, and increase adversaries' ability to exploit vulnerabilities and undermine the functions of critical infrastructure. Extreme weather events, natural hazards, terrorism, and hostile state actors are among the threats to critical functions, the 'systems of systems,' and systemic risks that can have global, cascading effects. As networked devices are further integrated into lives and businesses, their vulnerabilities provide additional attack vectors for nation-states and foreign adversaries. [...] With these critical mission sets, CISA [Cybersecurity and Infrastructure Security Agency] must do more to address today's complex challenges and to prepare for future threats. CISA can leverage its global network to strengthen partner capacity and to build a better, collective practice posture and response to urgent threats that are particularly critical to U.S. national security interests. CISA is committed to promoting an open, interoperable, reliable and secure interconnected world within a global, operational and policy environment where network defenders and risk managers can collectively prevent and mitigate threats to critical infrastructure. We invite our global partners to join us in the fight to secure today and to defend tomorrow."

  United States. Department of Homeland Security. Cybersecurity and Infrastructure Security Agency

  2021-02
• Emergency Communications Technical Assistance and Planning Guide: FY2020 Highlights and Offerings

  Show summary     Open resource [pdf]     (open full abstract)

  From the Document: "In FY2020, CISA [Cybersecurity and Infrastructure Security Agency] will provide an opportunity for all 56 states and territories to receive TA [technical assistance] services at no cost. In preparation for the request process, this Guide lists available TA service offerings. The process for SWICs [Statewide Interoperability Coordinator] to request TA services has been updated [...] CISA TA services are also available for all federally recognized Tribal Nations."

  United States. Department of Homeland Security. Cybersecurity and Infrastructure Security Agency

  2019-10
• Department of Homeland Security: Industrial Internet of Things (IIoT): Opportunities, Risks, Mitigation

  Show summary     Open resource [pdf]     (open full abstract)

  From the Executive Summary: "There are driving pressures in the marketplace for efficiencies, and these pressures extend to critical infrastructure sectors including the electrical grid, telecommunications, and finance--some of the most essential critical infrastructure sectors. Industrial Internet of Things (IIoT)--also referred to as Industry 4.0--deployment is meant to provide additional capabilities at a lower cost. Today a suite of low-cost, energy-efficient sensors with wireless connectivity combined with cloud-based analytics are on the market. These sensors offer new capabilities and cost efficiencies, lower pollution, and offer interoperability that turns into revenue for corporate growth. IIoT adoption leverages many other new technologies, such as LTE [Long-Term Evolution], 5G [fifth generation technology], Wi-Fi and other wireless connectivity technologies; the cloud for analytics and storage; and innovations in battery and solar technologies to enable near-universal placement, connectivity, and power for any IIoT device."

  United States. Department of Homeland Security

  2019?
• EMR-ISAC: Infogram, Volume 21 Issue 8, February 25, 2021

  Show summary     Open resource [html]     (open full abstract)

  The Emergency Management and Response Information Sharing and Analysis Center's (EMR-ISAC) InfoGram is a weekly publication of information concerning the protection of critical infrastructures relevant to members of the Emergency Services Sector. This issue includes the following articles: "Ready Responder resources ensure peace of mind when disaster strikes"; "'Smart grid' interoperability standards from NIST [National Institute of Standards and Technology] may benefit future emergency services"; "DHS announces funding opportunity for $1.87 billion in preparedness grants"; "Training Opportunity: Mitigating Chemical/Explosive and Biological Threats Through Triggers and Tripwires for the Emergency Response Sector"; "Telephony Denial of Service Attacks can disrupt emergency call center operations"; "US cities disclose data breaches after vendor's ransomware attack"; "NIST offers tools to help defend against state-sponsored hackers"; and "CISA [Cybersecurity and Infrastructure Security Agency] , FBI share recommendations after water treatment hack."

  Emergency Management and Response-Information Sharing and Analysis Center (U.S.)

  2021-02-25